Ref 

# 


Hits 


Search Quer/ 


DBS 


Default 
Operator 


Plurals 


Time Stamp 


...m.iy. ....... 

L2 


6489 


((713/151) or (713/152) or 


USPAT; 


OR 


OFF 


2005/07/22 12:29 






(713/153) or (713/154) or 
(713/200) or (713/201) or 
(709/202) or (709/224) or 


IBMJTDB 








L3 
L4 


1736 
39 


(709/318) or (711/216) or 
(382/124) or (705/58)).CCLS. 

11 and (intrus$4 intrud$4 invad$4 
invas$4 tamper$4 flood$3 
attack$3 (code near red) nimda 
vulnerdbilit$4 (hostile near 
traffic$3)) 

13 and (active$2 near 
(application$2 program$4)) 

14 and signature$l 

15 and (filter$3 e)ctract$4)|i . 


USPAT; 
IBM_TDB 

USPAT; 
IBM_TDB 


OR 
OR 


OFF 
OFF 


2005/07/22 12:50 
2005/07/22 12:47 


L5 
L6 


13 
11 


USPAT; 
IBM_TDB 

USPAT; 


OR 

OR 


OFF 

OFF 


2005/07/22 12:33 
2005/07/22 13:01 


L7 


648 


13 and signature$l 


IBM_TDB 

USPAT; 
IBM.TDB 


OR 


OFF 


2005/07/22 12:33 


L8 


363 


17 and (filter$3 e)ctract$4) 


USPAT; 
IBM_TOB 

USPAT; 
IBM_TDB 


OR 


liiiiil 


2005/07/22 12:33 


L9 


48660 


(suspen$4 stop$l temporar$4 
discontin$8 disconnect$4) near3 
(evaluat$4 filter$4 extract$4 
anaiy<po cAarn«po rnuniior.^'T 
quer$4) 


OR 


OFF 


2005/07/22 12:55 


LIO 


16 


18 and 19 


USPAT; 


OR 


OFF 


2005/07/22 12:36 








IBM_TDB 








Lll 


9472 


(inactiv$2 in-active$2 unactive$2 

discontin$8 (not$l near active$2)) 
near (application$2 program$4) 


USPAT; 
IBM TDB 


OR 


OFF 


2005/07/22 12:49 


L12 


223 


12 and 111 


USPAT; 


OR 


OFF 


2005/07/22 12:49 \ 








IBM^TOB 




















L13 


11 


112 and 19 


USPAT; 
IBMJTDB 


OR 


OFF 


2005/07/22 12:49 


LM 


••llll 8 


113 and (remov$3 dlscdrd$3 
delet$4 ) 


USPAT; 
IBMJTDB 


OR 


OFF 


2005/07/22 12:55 


L15 


4 


114 and (intrus$4 intrud$4 invad$4 

attack$3 (code near red) nimda 
vulnerabilit$4 (hostile near 
iraTTic$jjj 


USPAT; 

TRM TnR 
iDrl_ 1 UO 


OR 


OFF 


2005/07/22 12:55 


L16 


45838 


::(suspen$4; stdji)$iiitemiw^ 








^^2005/07/22^i2i56^^ 






discontin$8 ) near3 (evaluat$4 
filter$4 extract$4 analy$8 exam$8 


IBM.TDB 
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L17 


353 


111 and 116 


USPAT; 
IBM_TDB 


OR 


OFF 


2005/07/22 12:55 


L18 


51 


117 and (intrus$4 intrud$4 invad$^ 
invas$4 tamper$4 flood$3 
attack$3 (code near red) nimda 


\ 


USPAT; 
IBMJTDB 


iiiiiliiiii 


OFF 


2005/07/22 13:00 


L19 


43 


vumeraDiiit$4 (nostiie near 
traffic$3)) 

118 and (remov$3 discard$3 
delet$4 ) 






USPAT; 
IBMJTDB 


OR 


OFF 


2005/07/22 12:59 
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Ref 
# 


Hits 


Search Query 

.(filtef;$3 filtrat$4) nMr3.(rul^$ 


DBS 
USPAT; 


Default 
Operator 

iiiiilii 


Plurals 
OFF 


Time Stamp 
2005/07/22 12:12 


L2 


14397 


:iifiie^t$iOjHii^i::i=iir=^^ 

(active$2 near2 (application$2 
software$2 program$l)) 


IBMJTDB 

USPAT; 
IBM.TDB 


OR 


OFF 


2005/07/22 11:03 


L3 


4066 


(inactive in-active$2 unavailable$l 
discontinu$4 disconnect$4) near2 
(applicatlon$2 software$2 


USPAT; 
IBMJTDB 


OR 


illlll 


2005/07/22 11:35 


L4 
L5 


8 

7 


program$l} 
11 and 12 and 13 

14 and traffic$l 


USPAT; 
IBM_TDB 

USPAT; 


OR 
OR 


OFF 
OFF 


2005/07/22 11:04 
2005/07/22 11:04 


L6 


2227 


(filter$3 filtrat$4 extract$4) near3 
(rule$ ruleset$l) 


ieMiiTDB 

USPAT; 
IBM.TDB 


OR 


OFF 


2005/07/22 11:11 


L7 


11874 


(monitDr$4 report$4 detect$4 


USPAT; 


OR 


OFF 


2005/07/22 11:37 






analyz$5 determin$6 obtain$3 


IBM.TDB 












veiw$3) near3 (intrus$4 intrud$3 
invad$3 fIood$3 (unusual$3 near 


















behavior$3) icmp heuristlc$l 
spoof$3 attack$3 syn tcp/syn) 














L8 




16 and 17 


L 
I 


JSPAT; 
BM.TDB 


UK 


Urr 


-yf\t\ClfY7 IT) 11 .TJ 


L9 


12 


18 and (ref1lter$6 re-filter$6 
re-extract$4 reextract$4). 

18 and 12 
110 not 19 


USPAT; 
IBM.TDB 


OR 


OFF 


2005/07/22 11:58 


LIO 
Lll 


20 
20 


USPAT; 
IBM_TDB 

USPAT; 
IBM_TDB 

USPAT; 
IBMJTDB 


OR 

OR 


OFF 

OFF 


2005/07/22 11:22 
2005/07/22 11:28 


L12 


19 


111 and signature$l 


OR 


OFF 


2005/07/22 11:28 


L13 


19 


112 and (unactiv$6 inactiv$6 


USPAT; 


OR 


OFF 


2005/07/22 11:32 






in-activ$6 disconnect$4 
discontin$6 (not$l activ$6)) 


IBM.TDB 






















L14 


8 


112 and (unactiv$6 inactiv$6 

111 dLUV^rQ UldLUIIIlCV.Up^ 

discontin$6 (not$l near activ$6)) 


USPAT; 
IBM_TDB 


OR 


OFF 


2005/07/22 12:01 


LIS 


5048 


(inactiv$6 in-actrve$$6 unactiv$6 
discontlnu$4 disconnect$4) near3 


USPAT; 
IBMJTDB 


OR 


OFF 


2005/07/22 11:36 


L16 


2561 


(application$2 progrdnfi$l) 

(intrus$4 intrud$3 invad$3 flood$3 
(unusual$3 near behavior$3) icmp 
neurisuc^i spooi>j atiacK$j syn 
tcp/syn heuristic$) nearS 
(signature$l rule$l ruleset$3 
protocol$l packet$l traffic) 


USPAT; 
IBM_TDB 


OR 


OFF 


2005/07/22 12:07 
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L17 


12 


115 and 116 


USPAT; 
IBM_TDB 


OR 


OFF 


2005/07/22 11:40 


LIS 


5 


117 and signature$l 


USPAT; 
IoM_TOd 

USPAT; 
IBMJTDB 




OR 


OFF 


2005/07/22 11:40 


L19 


189 


(intrus$4 intrud$3 invad$3 flood$3 

yuiiusuuiy^ Ileal uciiaviui^jy iciiip 

heuristic$l spoof$3 attack$3 syn 
tCD/svn heuristici) near3 
(signature$) 




OR 


OFF 


2005/07/22 11:57 


L20 


221 


(intrus$4 intrua$3 invacl$3 floocl$3 


USPAT; 


OR 


OFF 


2005/07/22 11:58 








(unusual$3 near behavior$3) icmp 


IBM_TDB 


















heuristic$l spoof$3 attack$3 syn 
tcp/syn heuristic! traffic$3) near3 














L 


>3 


2 


(signature!) 

120 and (reevaluat$3 re-evaluat$4 

1 cell lai y^^u ic Gil lai iijr^^v^ 

Teexamin$6 re-examin$6 refilter$6 
re-filter$6 re-extract$4 
reextract$4) 


USPAT; 
IBMJTDB 




OR 


OFF 


2005/07/22 12:08 


L 




2 


123 and (unactiv$6 inactiv$6 
in-activ$6 disconnect$4 
discontin$6 (not$l near activ$6) 
deactivat$4 de-activat$4 
siKpend$4 suspens$4 discard$4 
remov$4 delet$4 stop$3) 


USPAT; 
IBM.TDB 




OR 


OFF 


2005/07/22 12:22 
























L25 


434 


Xl^K^MIHM^^ Sm^B***^^^ ftMhtftf^tfJ^O flA.A.«Jtfl*0 

(intrus$4 intrud$3 invaa$3 fiood$3 
(unusual$3 near behavior$3) icmp 
heuristic$l spoo1>3 attack$3 syn 
tcp/syn heuristic!) and 115 


USPAT; 
IBM_TDB 




OR 


OFF 


2005/07/22 12:12 


1 -Jfi 


64 


125 and 12 


USPAT; 
IBM TDB 




OR 


OFF 


2005/07/22 12:07 














L27 


20 


. 126 and signature$l 


USPAT; 
IBMJTDB 


OR 


OFF 


2005/07/22 12:08 


L28 


1 


127 and (reevaluat$3 re-evaluat$4 


USPAT; 




no 




2005/07/22 12:13 








reanalyz$6 re-ananlyz$6 
reexamin$6 re-examin$6 refilter$6 
re-filter$6 re-extract$4 
reextract$4) 


IBMJTDB 
















































L30 


13 


128 and (suspend$4 suspens$4) 


USPAT; 
IBM_TDB 


OR 


OFF 


2005/07/22 12:14 


L32 


iiiiiiiilil 


130 and {discard$4 remov$4 


USPAT; 


OR 


OFF 


2005/07/22 12:15 


L33 


5341 


delet$4) 

(intrus$4 intrud$3 invad$3 flood$3 
^unusuai^j near Denavior^j; icrnp 
neuristic^i spooi>^ attacK^o syn 
tcp/syn heuristic!) and 
signature!! 


IBM.TDB 

USPAT; 
IBMJTDB 


OR 


OFF 


2005/07/22 12:12 


L34 


iliiliiiiii 


133 and (rule! ruleset!!) 


USPAT; 




OR .||| 


iiili 














IBMJTDB 
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